Cyber alerts

51 results

May 2026

Published Friday 15 May 2026 (11:56) (updated 15 May 2026)

Microsoft Releases Security Advisory for a Zero-Day Vulnerability in Exchange Server

Successful exploitation of CVE‑2026‑42897 could lead to arbitrary JavaScript execution in the browser context for users of on‑premises Microsoft Exchange Server deployments

CC-4784 High

Published Friday 15 May 2026 (10:50) (updated 15 May 2026)

Exploitation of Zero-Day Vulnerability in Cisco Catalyst SD-WAN

CVE-2026-20182 could allow an unauthenticated attacker to bypass authentication and gain administrative privileges

CC-4783 Medium

Published Thursday 14 May 2026 (03:16) (updated 14 May 2026)

F5 Releases Security Updates for NGINX Vulnerability CVE-2026-42945

NGINX Plus and NGINX Open Source have a vulnerability that could force a restart or allow code execution if exploited

CC-4782 Medium

Published Wednesday 13 May 2026 (01:38) (updated 13 May 2026)

Microsoft Releases May 2026 Security Updates

Scheduled updates for Microsoft products address 137 vulnerabilities

CC-4781 Medium

Published Tuesday 12 May 2026 (03:58) (updated 12 May 2026)

Supply Chain Attack Affecting Numerous npm and PyPI Packages

A supply chain attack, dubbed as "Mini Shai-Hulud", is affecting well-known projects including TanStack, Mistral AI, UiPath, and OpenSearch

CC-4780 Medium

Published Friday 8 May 2026 (03:58) (updated 8 May 2026)

Ivanti Releases Security Updates for High‑Severity Vulnerabilities in Endpoint Manager Mobile (EPMM)

Two high‑severity vulnerabilities in Ivanti EPMM could enable authenticated attackers to gain administrative access and execute arbitrary code

CC-4779 Medium

Published Friday 8 May 2026 (01:36) (updated 14 May 2026)

Proof-of-Concept Exploit Released for Three Vulnerabilities in the Linux Kernel

Successful exploitation of CVE-2026-46300, CVE‑2026‑43284, and CVE‑2026‑43500 in Linux distributions could allow an unprivileged attacker to achieve root privileges on the system

CC-4778 Medium

Published Thursday 7 May 2026 (02:38) (updated 7 May 2026)

Apache Releases Security Update for Apache HTTP Server (HTTP/2)

CVE‑2026‑23918 could allow remote unauthenticated attackers to achieve remote code execution or denial‑of‑service on Apache HTTP Server

CC-4777 High

Published Wednesday 6 May 2026 (01:00) (updated 14 May 2026)

Palo Alto Networks Releases Security Advisory for Critical Vulnerability in PAN‑OS

CVE‑2026‑0300 enables unauthenticated remote code execution with root privileges on exposed Palo Alto PAN‑OS firewalls

April 2026

CC-4776 Medium

Published Thursday 30 April 2026 (04:32) (updated 5 May 2026)

Active Exploitation of Local Privilege Escalation Vulnerability in the Linux Kernel

CVE-2026-31431 (dubbed "Copy Fail") affects all Linux kernel builds since 2017, and could allow a local, unprivileged attacker to escalate privileges to root.